CVE-2015-8702
HighSummary
The DNS::GetResult function in InspIRCd before version 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.
Risk Assessment
The organization may experience service interruptions related to DNS, potentially leading to disruptions in communication and system availability.
Recommendation
It is recommended to update InspIRCd to version 2.0.19 or later to mitigate this vulnerability.
Other vulnerabilities in InspIRCd
See all- CVE-2012-6697High
InspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).
- CVE-2012-6696Critical
Versions of inspircd in Debian before 2.0.7 have an issue with improper handling of unsigned integers. This vulnerability exists due to an incomplete fix for CVE-2012-1836.
Original NVD description (English source)
The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.